services / Azure / Network authorization policies

A network authorization policy defines access-control rules governing which principals or resources may connect to, join, or associate with a network resource.

Writing/deleting alters which principals/resources can associate with network resources, making this access-control policy security-relevant.

Microsoft.​Network/​authorizationPolicies/​delete

Deleting the policy removes the access-control rules constraining network association, lifting deny restrictions that would otherwise block attacker connectivity.

Risks

1. Policy destruction (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links